New Redirection Technique

Spammers should not profit, so post information here that hits their pockets. There are many ways to fight spammers, and we have automation tools to combat them efficiently. These forums are moderated, but do not reflect the views of the hosting company, domain registrar, etc. By entering any of these forums, you agree that you cannot hold anyone liable for anything related in any way to these forums.

New Redirection Technique

Postby GarWarner » Tue Jan 17, 2017 12:54 pm

I was looking at a spam campaign yesterday that was pretending to be invitations from a friend on Microsoft, but really just redirected to a spam pharma website.
The interesting thing to me was that the campaign included 770 different redirectors, and that every one of them generated a custom redirector page.

Here's a blog post that explains the way the redirector works: ... harma.html
User avatar
Getting started
Posts: 11
Joined: Sun Oct 26, 2008 8:12 am

Re: New Redirection Technique

Postby Red Dwarf » Tue Jan 17, 2017 3:05 pm

Excellent analysis. Note that all 4 targets are EvaPharmacy sites, created on the same day -
created: 2016.12.07

This Russian pharmacy fraud has been going on for over 5 years.

It is documented at
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
Posts: 10539
Joined: Tue Jun 27, 2006 2:01 am

Return to Fight Spammers

Who is online

Users browsing this forum: No registered users and 1 guest